[Pdns-users] DNSSEC error

[Huber, Peter]

Hi,

i have strange thing using the pdns resolver. My domain uni-wh.de was ok for a long time, now there seems to be a DNSSEC problem and I don't know where this comes from, nor how to fix this.
What I am testing:

delv @193.175.243.110 uni-wh.de

;; chase DS servers resolving 'uni-wh.de/DS/IN': 193.175.243.110#53
;; REFUSED unexpected RCODE resolving 'de/NS/IN': 193.175.243.110#53
;; REFUSED unexpected RCODE resolving './NS/IN': 193.175.243.110#53
;; REFUSED unexpected RCODE resolving 'de/DS/IN': 193.175.243.110#53
;; broken trust chain resolving 'uni-wh.de/DNSKEY/IN': 193.175.243.110#53
;; broken trust chain resolving 'uni-wh.de/A/IN': 193.175.243.110#53
;; resolution failed: broken trust chain

dig @193.175.243.110 uni-wh.de +dnssec +short
A 14 2 3600 20230831000000 20230810000000 6632 uni-wh.de. jeJVLcdTgZTEAfbv1wIKrYFracW6//zzHwINZP4jM0hpdz+iYrmld7ss uX2sU2ZfXlWClNY6GBd0GKD4yozlk8ZZHb6nnQu+k3TF+4Ti/vGO+XvY 2vcAgcMKstfeY/We

There seems to be a valid key (till 20230831000000) but the chain seems to be broken?

Can anyone give me a hint what I can do, where I have to look?

Thank you
Peter

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20230818/bc46f86b/attachment.htm>